7.0 High

CVE-2025-0813 CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an unauthorized…

Description

CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an unauthorized user without permission rights has physical access to the EPAS-UI computer and is able to reboot the workstation and interrupt the normal boot process.

Affected products and versions

Product	Affected versions	Fixed in
EcoStruxure Power Automation System User Interface (EPAS-UI) - Secured Versions	Versions not published

Do you use EcoStruxure Power Automation System User Interface (EPAS-UI) - Secured Versions?

Track this CVE Watch EcoStruxure Power Automation System User Interface (EPAS-UI) - Secured Versions Check my SBOMs

www.cveye.io/en/cve/CVE-2025-0813

Timeline

Published March 12, 2025
Last modified March 12, 2025

References

download.schneider-electric.com download.schneider-electric.com

Track this CVE